2
0

test.cnf 2.6 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788
  1. #
  2. # SSLeay example configuration file.
  3. # This is mostly being used for generation of certificate requests.
  4. #
  5. RANDFILE = ./.rnd
  6. ####################################################################
  7. [ ca ]
  8. default_ca = CA_default # The default ca section
  9. ####################################################################
  10. [ CA_default ]
  11. dir = ./demoCA # Where everything is kept
  12. certs = $dir/certs # Where the issued certs are kept
  13. crl_dir = $dir/crl # Where the issued crl are kept
  14. database = $dir/index.txt # database index file.
  15. new_certs_dir = $dir/new_certs # default place for new certs.
  16. certificate = $dir/CAcert.pem # The CA certificate
  17. serial = $dir/serial # The current serial number
  18. crl = $dir/crl.pem # The current CRL
  19. private_key = $dir/private/CAkey.pem# The private key
  20. RANDFILE = $dir/private/.rand # private random number file
  21. default_days = 365 # how long to certify for
  22. default_crl_days= 30 # how long before next CRL
  23. default_md = md5 # which md to use.
  24. # A few difference way of specifying how similar the request should look
  25. # For type CA, the listed attributes must be the same, and the optional
  26. # and supplied fields are just that :-)
  27. policy = policy_match
  28. # For the CA policy
  29. [ policy_match ]
  30. countryName = match
  31. stateOrProvinceName = match
  32. organizationName = match
  33. organizationalUnitName = optional
  34. commonName = supplied
  35. emailAddress = optional
  36. # For the 'anything' policy
  37. # At this point in time, you must list all acceptable 'object'
  38. # types.
  39. [ policy_anything ]
  40. countryName = optional
  41. stateOrProvinceName = optional
  42. localityName = optional
  43. organizationName = optional
  44. organizationalUnitName = optional
  45. commonName = supplied
  46. emailAddress = optional
  47. ####################################################################
  48. [ req ]
  49. default_bits = 2048
  50. default_keyfile = testkey.pem
  51. distinguished_name = req_distinguished_name
  52. encrypt_rsa_key = no
  53. [ req_distinguished_name ]
  54. countryName = Country Name (2 letter code)
  55. countryName_default = AU
  56. countryName_value = AU
  57. stateOrProvinceName = State or Province Name (full name)
  58. stateOrProvinceName_default = Queensland
  59. stateOrProvinceName_value =
  60. localityName = Locality Name (eg, city)
  61. localityName_value = Brisbane
  62. organizationName = Organization Name (eg, company)
  63. organizationName_default =
  64. organizationName_value = CryptSoft Pty Ltd
  65. organizationalUnitName = Organizational Unit Name (eg, section)
  66. organizationalUnitName_default =
  67. organizationalUnitName_value = .
  68. commonName = Common Name (eg, YOUR name)
  69. commonName_value = Eric Young
  70. emailAddress = Email Address
  71. emailAddress_value = eay@mincom.oz.au